• Introduction To Xcitium Secure Email Gateway - MSP
  • Purchase Licenses
  • License Information
• Get Started
• Login To The Admin Console
• The Admin Console
• The Dashboard Area
• Domain Management
  • Add A Domain
  • Delete Domains
  • Edit Domains
  • Validate Domains
  • Manage A Domain
    • Domain Dashboard
    • Incoming
      • Quarantine
      • Manage Archived Mails
      • Incoming Spam Detection Settings
      • Report Spam
      • Delivery Queue
      • Destination Routes
      • Local Recipients
      • Clear Incoming Cache
      • Log Search
      • Domain Aliases
      • Domain Settings
      • Manage Report Subscriptions For Selected Domain
      • Relay Restrictions
      • Geolocation Restrictions
      • SPF Control Settings
    • Outgoing
      • Clear Outgoing Cache
      • Log Search
      • Users
      • Office 365 Activation
    • Email Management
      • Email Size Restriction
      • Blocked Extensions
      • Released Requests
      • Blacklisted Requests
      • White-listed Requests
    • Domain Audit Log
      • Audit Log Configuration
      • View Domain Log
    • Domain Rules
      • Rules
      • TLD And GTLD Rules
      • Recipient Whitelist
      • Sender Whitelist
      • Recipient Blacklist
      • Sender Blacklist
      • Whitelist Senders Per User
      • Blacklist Senders Per User
    • Account Management
      • User Account Management
      • Manage User Auto-import
      • View User History
      • Import Users From LDAP
        • LDAP Import Configuration
        • LDAP Import Confirmation List
        • LDAP Import Ignore List
• Audit Log
• Administrator Account Management
  • Administrators
  • User Groups & Permissions
  • Admin Groups & Permissions
  • My Comodo Account
  • My Profile
  • Users History
• Customer Management
  • End User License And Subscriber Agreements
  • View License Information
  • Manage Report Subscriptions
  • Notification Email Settings
• CSEG Reports - An Overview
  • Quarantine Report
  • Domain Statistics Report
  • Auto-Imported Users Report
  • Quarantine Release Report
  • Reported Spam Report
• Appendix 1 - CSEG Error Codes
• Appendix 3 - Troubleshooting LDAP
• Appendix 4 - Useful Links
• About Xcitium Security Solutions

Appendix 3 - Troubleshooting LDAP

This section explains how to resolve some common problems that may arise when configuring LDAP.

For full details on working with LDAP, http://help.comodo.com/topic-445-1-914-12228-Import-Users-from-LDAP.html

• Problem: Unhandled Exception: 

Solution: The exception was not classified.

• Problem: Size limit exceeded, unable to extract more then users from server. Size limit must be increased on server side or specify more strict query

Solution: Active Directory server has limitation on the number of search entries which may be iterated during querying. By default, Microsoft Active Directory allows only 1000 search entries. If the server received more than that, the administrator should override the default LDAP search size limit in the Active Directory, or use more strict query

• Problem: Incorrect filter settings: ....

Solution: Filter settings contain incorrect format or AD server doesn't support it.

• Problem: Incorrect BaseDN settings: ...

Solution: BaseDN value has incorrect format.

• Problem: Unable to connect with provided host in BaseDN settings: ...

Solution: Provided domain name for BaseDN setting cannot be resolved in AD forest tree. Assure a domain name is correct.

• Problem: Unable to resolve LDAP referral, host unreachable. Users had found before referral might be imported.  Possible solution is to use Global Catalog server (port 3268/3269 as default) to avoid resolving referrals.

Solution: CSEG is trying to extract as much as possible information and following referrals to resolve all search entries in a query. If the URL in the referral is unreachable by CSEG then the iteration will stop. Only partial result will be provided. That occurs when an administrator uses a private domain and it cannot be accessed with only domain name (the referral contains the list of URLs of the explicit domain names but the information about servers located in the private subnet is absent). To avoid the referrals occurrence in search entries use the Global Catalog server for querying. By default, the port for this server is 3268/3269 and that depends on whether the SSL enabled or not.

• Problem: Unknown error. Users found before error might be imported. Original exception - ...

Solution: Search entries has been terminated within the replication process. Please contact support to find a solution.

• If you do not know your BaseDN, here’s a step-by-step guide to determining your BaseDN.

Most organizations follow a similar convention for their determined BaseDN when the organization sets up its Active Directory. For a company with the domain of example.com, the typically BaseDN is cn=Users,dc=example,dc=com